VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

CERT/CC advisories describe multiple vulnerabilities disclosed September 16–24, 2026, including unauthenticated ViewSonic vCast screen capture and device compromise, RFID UID replay against Norwegian Cruise Line door controllers, non-rotatable Imprivata EAM RSA keys enabling appliance impersonation, cross-user conversation access in Kotaemon, Secure Boot bypass through vendor-signed UEFI Shell applications, root-level OS command injection in Dokploy, and MLflow pickle-deserialization control bypasses enabling code execution.